General
-
Target
1dbf276720f54fd0acdeb67710d8f3e8f468b1ac1b3f80c5ceb859ee04d118f6.exe
-
Size
707KB
-
MD5
e7b9b400aaabc9f0f3122e1e9e6a52e7
-
SHA1
11bcc40e5868a189aefdf78129b4d747c9ea1f1c
-
SHA256
1dbf276720f54fd0acdeb67710d8f3e8f468b1ac1b3f80c5ceb859ee04d118f6
-
SHA512
7dece6d512815e12adbfa956698d9fccd4738b047be07cf331e2be89d34bb39f3b3df926db0fd1116213db69c1e0bb989dd7843fe49d40b68a23aa482830d166
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1x89vnh:6uaTmkZJ+naie5OTamgEoKxLWsJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1dbf276720f54fd0acdeb67710d8f3e8f468b1ac1b3f80c5ceb859ee04d118f6.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections